Douglas DePeppe

Advisor

Areas of expertise:

Active Trading, Advisor Trends, Blockchain/DLT, CISO Executive Leadership, Compliance, Corporate Actions, Cyber Risk Management Strategy, Data and Analytics, Data Management, Data Protection and Privacy, Digital Transformation, Global Anti-Corruption, Governance, Metrics, and Reporting, Identity and Access Management (IAM), Insuretech, Internet of Things, Machine Learning and AI, Managed Security Services, Regulations, Risk Management, Threat Intelligence, Underwriting

Douglas DePeppe, a former cyber-law practice leader in the military and U.S. Department of Homeland Security, has been specializing as a multidisciplinary cyber risk advisor since 2004. He holds a Juris Doctor and a Master of Laws degree with a focus on national security law and cyber-law. He served on the 2009 White House 60-day Cyberspace Policy Review, as part of the Lawyers Working Group. In 2018, he was inducted into the Information Sharing Hall of Fame. He also leads two cyber working groups with affiliation to the Department of Homeland Security (DHS), including the ISAO Standards Organization, and he serves as Board President of the Cyber Resilience Institute and leads its Sports-ISAO Program Office.

In private practice, Doug has provided incident response assistance, data privacy and protection advisory and training services to corporate leadership, and public-privacy partnership and information sharing assistance to a cross-sector set of clients. Doug engages in international consulting to both public and private organizations, has spoken at conferences across five continents, and has published his work in periodicals and journals. In the area of data breach coaching, Doug has managed complex data breach investigations and advised clients concerning duties, exposures, and recovery from complex data breach cases.

Within the cybersecurity team at Datos Insights, Doug provides leadership and knowledge regarding cyberattack trends, emerging compliance requirements, and best practices for risk management arising from the various people, process, and technology attack surface risks.